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Abstract 



We present quantum query complexity bounds for testing algebraic 
properties. For a set S and a binary operation on S, we consider the 
decision problem whether 5 is a semigroup or has an identity element. 
If 5 is a monoid, we want to decide whether 5 is a group. 

We present quantum algorithms for these problems that improve the 
best known classical complexity bounds. In particular, we give the first ap- 
plication of the new quantum random walk technique by Magniez, Nayak, 
Roland, and Santha [MNRSOTj that improves the previous bounds by Am- 
bainis |Amb04j and Szegedy |Sze04] . We also present several lower bounds 
for testing algebraic properties. 

1 Introduction 

Quantum algorithms have the potential to demonstrate that for some problems 
quantum computation is more efficient than classical computation. A goal of 
quantum computing is to determine whether quantum computers are faster than 
classical computers. 

In search problems, the access to the input is done via an oracle. This mo- 
tivates the definition of the query complexity, which measures the number of 
accesses to the oracle. Here we study the quantum query complexity, which is 
the number of quantum queries to the oracle. For some problems the quantum 
query complexity can be exponentially smaller than the classical one; an example 
is the Simon algorithm |Sim94j . 

Quantum query algorithms have been presented for several problems, 



see |BDHHMSWOT| IAmb04| IDHHM041 IMN051 IMSS051 [BS06| IDoeOTaj IDoeOTbj . 



These algorithms use search techniques hke Grover search |Gro96j . amphtude 
amphfication |BHMTdO] and quantum random walk |Amb04t ISze04] . 

In this paper we study the quantum query complexity for testing algebraic 
properties. Our input is a multiplication table for a set S of size n x n. In 
Section [3] we consider the semigroup problem, that is, whether the operation 
on S is associative. Rajagopalan and Schulman [RSOO] developed a randomized 
algorithm for this problem that runs in time O(n^). As an additional parameter, 
we consider the binary operation o : 5* x 5* — > M, where M C 5*. We construct 
a quantum algorithm for this problem whose query complexity is 0(n^/^), if the 
size of M is constant. Our algorithm is the first application of the new quantum 
random walk search scheme by Magniez, Nayak, Roland, and Santha |MNRS07] . 
With the quantum random walk of Ambainis |Amb04] and Szegedy |Sze04j . the 
query complexity of our algorithm would not improve the obvious Grover search 
algorithm for this problem. We show a quantum query lower bound for the 
semigroup problem of Q{n) in Section O 

In Section H] we consider the group problem, that is, whether the monoid M 
given by its multiplication table is a group. We present a randomized algorithm 
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that solves the problem with 0{n2) classical queries to the multiplication table. 
This improves the naive O(n^) algorithm that searches for an inverse in the mul- 
tiplication table for every element. Then we show that on a quantum computer 
the query complexity can be improved to 0(ni4), where the 0-notation hides a 
logarithmic factor. 

In Section [5l we show linear lower bounds for the semigroup problem and the 
identity problem. In the latter problem we have given a multiplication table of a 
set 5* and have to decide whether S has an identity element. As an upper bound, 
the identity problem can be solved with linearly many quantum queries, which 
matches the lower bound. Finally we show linear lower bounds for the quasigroup 
and the loop problem, where one has to decide whether a multiplication table is 
a quasi group or a loop, respectively. 

2 Preliminaries 

2.1 Quantum Query Model 

In the query model, the input Xi, . . . ,xn is contained in a black box or oracle 
and can be accessed by queries to the black box. As a query we give i as input to 
the black box and the black box outputs Xj. The goal is to compute a Boolean 
function / : {0, 1}^ — > {0, 1} on the input bits x = (xi, . . . , Xat) minimizing the 
number of queries. The classical version of this model is known as decision tree. 

The quantum query model was explicitly introduced by Reals et 
al. |BBCMW01] . In this model we pay for accessing the oracle, but unlike the 
classical case, we use the power of quantum parallelism to make queries in super- 
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position. The state of the computation is represented by \i,b,z), where i is the 
query register, b is the answer register, and z is the working register. 

A quantum computation with k queries is a sequence of unitary transforma- 
tions 

where each Uj is a unitary transformation that does not depend on the input x, 
and Ox are query (oracle) transformations. The oracle transformation can be 
defined as : \i, b, z) ji, 6 © Xj, z). 

The computation consists of the following three steps: 

1. Go into the initial state |0). 

2. Apply the transformation UtO^ ■ ■ ■ O^Uq. 

3. Measure the final state. 

The result of the computation is the rightmost bit of the state obtained by the 
measurement. 

The quantum computation determines / with bounded error, if for every x, 
the probability that the result of the computation equals f {xi, ... ,xj\f) is at least 
1 — e, for some fixed e < 1/2. In the query model of computation each query adds 
one to the query complexity of an algorithm, but all other computations are free. 



2.2 Tools for Quantum Algorithms 

For the basic notation on quantum computing, we refer the reader to the textbook 
by Nielsen and Chuang [NC03] . Here, we give three tools for the construction of 
our quantum algorithms. 

Quantum Search. A search problem is a subset P C {1,...,A^} of the 
search space {!,..., A^}. With P we associate its characteristic function 
/p:{l,...,Ar}^ {0,1} with 




1, if a; e P, 
0, otherwise. 



Any X G P is called a solution to the search problem. Let k = \P\ he the number 
of solutions of P. 

Theorem 2.1 |Gro96t IBBHT98] For k > 0, the expected quantum query com- 
plexity for finding one solution of P is 0{^jN/k), and for finding all solutions, 
it is 0{\/kN). Futhermore, whether k > can be decided in 0{\/N) quantum 
queries to fp. 
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Amplitude Amplification. Let A be an algorithm for a problem with small 
success probability at least e. Classically, we need 6(l/e) repetitions of A to 
increase its success probability from e to a constant, for example 2/3. The corre- 
sponding technique in the quantum case is called amplitude amplification. 

Theorem 2.2 |BHMTdO] Let A be a quantum algorithm with one-sided error 
and success probability at least e. Then there is a quantum algorithm B that 
solves A with success probability 2/3 by 0{^) invocations of A. 

Quantum Walk. Quantum walks are the quantum counterpart of Markov 
chains and random walks. The quantum walk search provide a promising source 
for new quantum algorithms, like quantum walk search algorithm |KSW03j . el- 
ement distinctness algorithm [Amb04j . triangle finding [MSSOSj . testing group 
commutativity [MN05] . and matrix verification [BS06j . 

Let P = (pxy) be the transition matrix of an ergodic symmetric Markov chain 
on the state space X. Let M C X be a set of marked states. Assume that the 
search algorithms use a data structure D that associates some data D{x) with 
every state x E X. From D[x), we would like to determine if x G M. When 
operating on D, we consider the following three types of cost: 

Setup cost s: The worst case cost to compute D{x), for x E X. 

Update cost u: The worst case cost for transition from x to y, and update 
D{x) to D{y). 

Checking cost c: The worst case cost for checking if x G M by using D{x). 

Magniez et al. |MNRS07] developed a new scheme for quantum search, based 
on any ergodic Markov chain. Their work generalizes previous results by Am- 
bainis |Amb04] and Szegedy |Sze04] . They extend the class of possible Markov 
chains and improve the query complexity as follows. 

Theorem 2.3 |MNRS07 ] Let 5 > Q be the eigenvalue gap of a ergodic Markov 
chain P and let > e. Then there is a quantum algorithm that determines if 
M is empty or finds an element of M with cost 



In the most practical application (see [Amb04l IMSSOSj ) the quantum walk 
takes place on the Johnson graph J{n, r), which is defined as follows: the vertices 
are subsets of {1, . . . , n} of size r and two vertices are connected iff they differ in 
exactly one number. It is well known, that the spectral gap 6 of J(n, r) is 1/r. 
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2.3 Tool for Quantum Query Lower Bounds 

In this paper, we use the following special case of a method by Ambainis [Amb02] 
to prove lower bounds for the quantum query complexity. 

Theorem 2.4 |Amb02j Let A C {0, 1}", B C {0, 1}" and f : {0, 1}" {0, 1} 

such that f{x) = 1 for all x & A, and f{y) = for all y E B. Let m and m! he 
numbers such that 

1. for every (xi, . . . , x„) G A there are at least m values i G {1, . . . , n} such 
that (xi, . . . , 1 — Xj, . . . , Xn) G B , 

2. for every (xi, . . . , x„) G B there are at least m' values i G {1, . . . ,n} such 
that (xi, . . . , Xj_i, 1 Xj, Xj-|_i, . . . , Xn) G A. 

Then every bounded- error quantum algorithm that computes f has quantum query 
complexity Q{y/m ■ m'). 

3 The Semigroup Problem 

In the semigroup problem we have given two sets S and M (1 S and a binary 
operation o : S x S ^ M represented by a table. We denote with n the size 
of the set S. One has to decide whether 5* is a semigroup, that is, whether the 
operation on S is associative. 

The complexity of this problem was first considered by Rajagopalan and 
Schulman [RSOO] , who gave a randomized algorithm with time complexity of 
0(n^ log |), where 6 is the error probability. They also showed a lower bound of 
f2(n^). The previously best known algorithm was the naive fi(n^) -algorithm that 
checks all triples. 

In the quantum setting, one can do a Grover search over all triples (a, b, c) G 
and check whether the triple is associative. The quantum query complexity of the 
search is 0(n^/^). We construct a quantum algorithm for the semigroup problem 
that has query complexity 0(n^/^), if the size of M is constant. In Section [5] we 
give a quantum query lower bound of Q{n) for this problem. 

Our algorithm is the first application of the recent quantum random walk 
search scheme by Magniez et al. [MNRSOT] . The quantum random walk of 
Ambainis |Amb04j and Szegedy [Sze04] doesn't suffice to get an improvement of 
the Grover search mentioned above. 

Theorem 3.1 Let k = n°' be the size of M with < a < 1. The quantum query 
complexity of the semigroup problem is 

0(n3+t), /or < a < |, 
0{nl+h, /or|<«<|, 
0{n^), /or I < a < 1. 
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Proof. We use the quantum walk search scheme of Theorem 12.31 To do so, we 
construct a Markov chain and a database for checking if a vertex of the chain is 
marked. 

Let A and B two subsets of S of size r that are disjoint from M. We will 
determine r later. The database is the set 

D{A, B) = {{a,b,aob) \ a e AU M and b e B U M }. 

Our quantum walk is done on the categorical graph product of two Johnson 
graphs Gj = J{n — k,r) x J[n — k,r). The marked vertices of Gj correspond 
to pairs {A, B) with {A o B) o S ^ A o [B o S). In every step of the walk, we 
exchange one row and one column of A and B. 

Now we compute the quantum query costs for the setup, update and checking. 
The setup cost for the database D{A, B) is (r + kY and the update cost is r + k. 
To check whether a pair (A, B) is marked, we search for a pair {b,c) & B x S with 
(A o 6) o c 7^ A o (6 o c). The quantum query cost to check this inequality is 0{k), 
by using our database. Therefore, by applying Grover search, the checking cost 
is 0{ky/nr). The spectral gap of the walk on Gj is 6 = 0(l/r) for 1 < r < |, 
see |BS06] . If there is a triple (a, b, c) with (a o 6) o c 7^ a o (6 o c), then there are 
at least (^Ztzl) marked sets (A^B). Therefore we have 



e > 



Let r = n^, for < /3 < L Assuming r > 2k we have 

1 ^ n — k ^ n 2n 
y/e ~ r — k ~ r/2 r 

Then the quantum query complexity of the semigroup problem is 

O ^r^ + - {^/r ■ r + y/rvf ■ k)^ =0 {n^'^ + + nt+°" 2 j . 

Now we choose /3 depending on a such that this expression is minimal. A straight 
forward calculation gives the bounds claimed in the theorem. □ 

For the special case that a = 0, i.e., only a constant number of elements 
occurs in the multiplication table, we get 

Corollary 3.2 The quantum query complexity of the semigroup problem is 
0{ni), if M has constant size. 

Note that the time complexity of our algorithm is 0{n^'^ logra). 
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4 Group Problems 



In this section we consider the problem whether a given finite monoid M is in fact 
a group. That is, we have to check whether every element of M has an inverse. 
The monoid M has n elements and is given by its multiplication table and the 
identity element e. 

To the best of our knowledge, the group problem has not been studied before. 
The naive approach for the problem checks for every element a G M, whether e 
occurs in a's row in the multiplication table. The query complexity is O(n^). We 
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develop a (classical) randomized algorithm that solves the problem with 0{n2) 
queries to the multiplication table. Then we show that on a quantum computer 
the query complexity can be improved to 0(ni4). 

Theorem 4.1 Whether a given monoid with n elements is a group can he decided 

with query complexity 

1. 0{n2) by a randomized algorithm with probability > 1/2, 

2. 0{n^ logn) by a quantum query algorithm. 

Proof. Let a G M. We consider the sequence of powers a, a^, a^, . . . . Since M is 
finite, there will be a repetition at some point. We define the order of a as the 
smallest power t, such that = a'^, for some s < t. Clearly, if a has an inverse, 
s must be zero. 

Lemma 4.2 Let a E M of order t. Then a has an inverse iff = e. 

Hence the powers of a will tell us at some point whether a has an inverse. On 
the other hand, if a has no inverse, the powers of a provide more elements with 
no inverse as well. 

Lemma 4.3 Let a G M. If a has no inverse, then a'' has no inverse, for all 
k>l. 

Our algorithm has two phases. In phase 1, it computes the powers of every 
element up to certain number r. That is, we consider the sequences Sj.ydj — 
(a, a^, . . . , a"^), for all a G M. If e G Sr{a) then a has an inverse by Lemma 14.21 
Otherwise, if we find a repetition in the sequence Sr{a), then, again by Lemma 
a has no inverse and we are done. 

If we are not already done by phase 1, i.e. there are some sequences Sr{a) left 
such that e ^ Sr{a) and Sr{a) has pairwise different elements, then the algorithm 
proceeds to phase 2. It selects some a G M uniformly at random and checks 
whether a has an inverse by searching for e in the row of a in the multiplication 
table. This step is repeated n/r times. 
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The query complexity t{n) of the algorithm is bounded by nr in phase 1 and 
by n'^/r in phase 2. That is t{n) < nr + n^/r, which is minimized for r = n^. 
Hence we have t{n) < 2n2. 

For the correctness observe that the algorithm accepts with probability 1 
if M is a group. Now assume that M is not a group. Assume further that the 
algorithm does not already detect this in phase 1. Let a be some element without 
an inverse. By Lemma [4.21 the sequence Sr{a) has r pairwise different elements 
which don't have inverses too by Lemma IT3l Therefore in phase 2, the algorithm 
picks an element without an inverse with probability at least r/n. By standard 
arguments, the probability that at least one out of n/r many randomly chosen 
elements has no inverse is constant. 

For the quantum query complexity we use Grover search and amplitude am- 
plification. In phase 1, we search for an a G M, such that the sequence Sr{a) 
has r pairwise different entries different from e. This property can be checked 
by first searching Sr{a) for an occurance of e by a Grover search with y^logr 
queries. Then, if e doesn't occur in Sr{a), we check whether there is an element 
in Sr{a) that occurs more than once. This is the element distinctness problem 
and can be solved with r^/^logr queries, see |Amb 04] . Therefore the quantum 
query complexity of phase 1 is bounded by y/n ■ r^/^ logr. 

In phase 2 we search for an a G M such that a has no inverse. In phase 2 
we actually search the row of a in the multiplication table. Hence this takes 
-y/n queries. Since at least r of the a's don't have an inverse, by amplitude 



5 Lower Bounds 

Theorem 5.1 The semigroup problem requires Q{n) quantum queries. 

Proof . Let S" be a set of size n and o : S x S ^ {0, l}a binary operation 
represented by a table. We apply Theorem 12. 4[ The set A consists of all n x n 
matrices, where the entry of position (1, 1), (1, c), (c, 1) and (c, c) is 1, for c G 
S — {0, 1}, and zero otherwise. It is easy to see, that the multiplication tables 
of A are associative, since {x o y) o z = x o [y o z) = 1 ioi aA\ x,y, z & {l,c} and 
zero otherwise. 

The set B consists of all n x ri matrices, where the entry of position 
(1, 1), (1, c), (c, 1), (c, c) and (a, b) is 1, for fixed a,b,c E S — {0, 1} with a,b c, 
and zero otherwise. Then {a o b) o c = 1 and a o (6 o c) = 0. Therefore the 
multiplication tables of B are not associative. 




□ 
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From each T G A, we can obtain T' E B hj replacing the entry of T at 
(a, b) by 1, for any a,b ^ {0, 1, c}. Hence we have m = f2(n^). From each T' G B, 
we can obtain T G A by replacing the entry 1 of T' at position (a, b) by 0, for 
a,b ^ {0,1, c}. Then we have m' = 1. By Theorem 12.41 the quantum query 
complexity is Q{y/m ■ m') = Q{n). □ 

Next, we consider the identity problem: given the multiplication table on a 
set S, decide whether there is an identity element We show that the identity 
problem requires linearly many quantum queries. We start by considering the 
1-column problem: given a 0-1-matrix of order n, decide whether it contains a 
column that is all 1. 

Lemma 5.2 The 1-column problem requires Q{n) quantum queries. 

Proof. We use Theorem 12. 4[ The set A consists of all matrices, where in n — 1 
columns there is exactly one entry with value 0, and the other entries of the 
matrix are 1. The set B consists of all matrices, where in every column there is 
exactly one entry with value 0, and the other entries of the matrix are 1. From 
each matrix T G A, we can obtain T' G -B by changing one entry in the 1-column 
from 1 to 0. Then we have m = n. From each matrix T' G -B, we can obtain 
T G A by changing one entry from to 1. Then we have m' = n. By Theorem 
12. 4[ the quantum query complexity is VL{n). □ 

Theorem 5.3 The identity problem requires VL{n) quantum queries. 

Proof . We reduce the 1-column problem to the identity problem. Given a 0-1- 
matrix M = {rriij) of order n. We define S = {0, 1, . . . , n} and a multiplication 
table T = (tij) with < i, j < n for S as follows: 

if rriij = 0, 
if ruij = 1, 

and to J = tifi = 0. Then M has a 1-column iff T has an identity element. □ 

Finding an identity element is simple. We choose an element a G 5 and then 
we test if a is the identity element by using Grover search in 0{y/n) quantum 
queries. The success probability of this procedure is ^. By using the amplitude 
amplification we get an 0{n) quantum query algorithm for finding an identity 
element (if there is one). Since the upper and the lower bound match, we have 
determined the precise complexity of the identity problem. 

Corollary 5.4 The identity problem has quantum query complexity Q{n). 
^Here we consider right identity, the case of left identity is analogous. 
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In the quasigroup problem we have given a set S and a binary operation on S 
represented by a table. One has to decide whether S" is a quasigroup, that is, 
whether all equations a o x = b and x o a = b have unique solutions. In the loop 
problem, one has to decide whether is a loop. A loop is a quasigroup with an 
identity element e such that ao e = a = eo a for all a E S. 

In the multiplication table of a quasigroup, every row and column is a permu- 
tation of the elements of S. In a loop, there must occur the identity permutation 
in some row and some column. We have already seen how to determine an iden- 
tity element with 0{n) quantum queries. A row or column is a permutation, if no 
element appears twice. Therefore one can use the element distinctness quantum 
algorithm by Ambainis |Amb04j to search for a row or column with two equal 

2 7 

elements. The quantum query complexity of the search is 0{y/n- n^) = 0{n~>). 
We show in the following theorem an Q{n) lower bound for these problems. 

Theorem 5.5 The quasigroup problem and the loop problem require Q{n) quan- 
tum queries. 

Proof. We reduce the identity matrix problem to the loop problem. Given a 
0-1-matrix M = {rrii j) of order n, decide whether M is the identity matrix. It is 
not hard to see that the identity matrix problem requires Q{n) quantum queries 
(similar as for the 1-column problem). 

We define S = {0, 1, . . . , n — 1} and a multiphcation table T = (tij) for S. 
For convenience, we take indices 0<i,j<n — 1 for M and T. The entries of 
the second diagonal are 



ti,n—l- 



n-1, if rui^i = 1, 
otherwise. 



For j^n — 1 — iwe define 

{i + j) mod n, if rui^n-i-j = 0, 
^iJ ~ 0' if fni^n-i-j = 1 and {i + j) mod n 7^ 0, 

1, otherwise. 

If M is the identity matrix, then T is a circular permutation matrix 



T 



/O I ■■■ n-2 n-l\ 
1 2 ■■■ n-l 

■■■ n-3 n-2j 



Hence is a loop with identity 0. 

Suppose M is not the identity matrix. If M has a on the main diagonal, say 
at position (i, z), then the value n — 1 doesn't occur in row i in T, and hence, row i 
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is not a permutation of S. If M has a 1 off the main diagonal, say at position 
{i,n — 1 — j), then there will be a or 1 at position in T, which is different 
from [i + j) mod n. Hence, either there will be two O's or two I's in row i in T, 
in which case row i is not a permutation of S", or a or 1 changes to 1 or 0. In 
the latter case, the i-th row of T can be a permutation only if correspondingly 
the other or 1 changes as well to 1 or 0, respectively. But then this carries over 
to the other rows and columns of T. That is, there must be more I's in M off 
the main diagonal, so that all O's and I's in T switch their place with respect to 
their position when M is the identity matrix. However, then there is no identity 
element in T and hence, T is not a loop. 

The reduction to the quasigroup problem can be done with similar arguments. 

□ 

Conclusion and Open Problems 

In this paper we present quantum query complexity bounds of algebraic proper- 
ties. We construct a quantum algorithm for the semigroup problem whose query 
complexity is 0{n^^'^), if the size of M is constant. Then we consider the group 
problem, and presented a randomized algorithm that solves this problem with 

3 ' — '11 

0(n2) classical queries and O^nis) quantum queries to the multiplication table. 
Finally we show linear lower bounds for the semigroup, identity, quasigroup and 
loop problem. 

Some questions remain open: Is there a quantum algorithm for the semigroup 
problem which is better then the Grover search bound of 0(n2) for \M\ > |. It 
is not clear, whether we can apply the technique of the randomized associative 
algorithm by Rajagopalan and Schulman [RSOO] in connection with the quantum 
walk search schema of Magniez et al. |MNRS07] . 

Some quantum query lower bound remain open. Are we able to prove a non- 
trivial lower bound for the group problem. Our upper bound for this problem is 
0(ni4). It would also be very interesting to close the gap between the Q{n) lower 
bound and the 0(n''/^) upper bound for the quasigroup and the loop problem. 
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